Claims 



1 . Apparatus for use in transactions, comprising: 

non-volatile memory containing a set of multiple identifiers associated with a customer account, 
wherein said multiple identifiers are also known to an agency providing said customer account, and 

a processor operable to select one identifier from said set of multiple identifiers for use with any 
transaction involving said customer account. 

2. The apparatus of claim 1, wherein each of the identifiers in said set of multiple identifiers is 
allocated by the agency uniquely to the apparatus. 

3. The apparatus of claim 1, further comprising a communications facility to engage a terminal, 
wherein the apparatus is operable to receive bill details for a transaction from the terminal, to generate a 
transaction record from the bill details, and to transmit the transaction record to the terminal. 

4. The apparatus of claim 3, wherein the transaction record includes a digital signature that is 
generated using a cryptographic key contained within the non- volatile memory. 

5. The apparatus of claim 3, wherein the transaction record is encrypted. 

6. The apparatus of claim 1, wherein said apparatus is provided within inert packaging to allow 
implantation into the human body. 

7. The apparatus of claim 1, wherein said apparatus is operable to engage a first class of terminals for 
making a transaction, and a second class of terminals to enter or to update account information stored in the 
non-volatile memory. 

8. The apparatus of claim 7, further comprising fust and second power circuits that are activated by 
said first and second class of terminals respectively, wherein activation of said second power circuit does 
not allow account information to be entered or updated in at least certain portions of said non-volatile 
memory. 

9. A method for making a transaction with a device, comprising: 

storing within the device a set of multiple identifiers associated with a customer account, wherein 
said multiple identifiers are also known to an agency providing said customer account, and 
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selecting one identifier from said set of multiple identifiers for use with a transaction involving 
said customer account. 

10. The method of claim 9, wherein each of the identifiers in said set of multiple identifiers is 
allocated by the agency uniquely to the device. 

1 1 . The method of claim 9, wherein making a transaction further comprises: 
engaging a terminal, 

receiving bill details for a transaction from the terminal, 
generating a transaction record from the bill details, and 
transmitting the transaction record to the terminal. 

12. The method of claim 1 1, wherein the transaction record includes a digital signature that is 
generated using a cryptographic key contained within the non-volatile memory. 

13. The method of claim 11, further comprising encrypting the transaction record. 

14. The method of claim 9, further comprising limiting the transaction rate of the device to prevent 
rapid read-out of the identifiers. 

15. Apparatus for use in transactions, including: 

means for storing a set of multiple identifiers associated with a customer account, wherein said 
multiple identifiers are also known to an agency providing said customer account, and 

means for selecting one identifier from said set of multiple identifiers for use with any transaction 
involving said customer account. 

16. Apparatus for use in making a transaction, including: 

non- volatile memory containing a set of multiple identifiers, wherein said multiple identifiers are 
also known to an agency associated with the transaction, and 

a processor operable to select one identifier from said set of multiple identifiers for use in any 
transaction. 

17. A method for opening an account on a portable transaction device comprising: 

opening an account record in an agency computer system, wherein said agency is to provide the 

account, 

generating a set of multiple identifiers to be used for transactions on the account, 
storing the set of multiple identifiers in the agency computer system, and 
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storing the set of multiple identifiers on the portable transaction device. 

18. The method of claim 17, wherein the identifiers are unique to the account for the agency. 

19. The method of claim 18, further comprising adding the identifiers to an index, wherein said index 
maps from an identifier to the corresponding account. 

20. The method of claim 17, wherein the identifiers are sparsely distributed across the set of possible 
identifiers. 

2 1 . The method of claim 17, wherein the identifiers within said set of multiple identifiers are unrelated 
to one another. 

22. The method of claim 17, wherein the identifiers are generated on the agency computer system, and 
are transmitted to the portable transaction device for storage thereon. 

23. The method of claim 17, further comprising generating at least one cryptographic key for use with 
the account. 

24. The method of claim 17, further comprising making a prepayment onto the account prior to using 
the account for transactions. 

25. The method of claim 17, further comprising establishing an identity of a person who is to hold the 
account prior to opening the account. 

26. A method for performing a transaction at a terminal using a portable transaction device, 
comprising: 

generating a bill for the transaction at the terminal, 
engaging the portable transaction device with the terminal, 
transmitting the bill from the terminal to the transaction device, 

selecting one identifier from a set of multiple identifiers stored on the transaction device for use in 
the transaction, 

generating a transaction record on the transaction device, the transaction record incorporating 
information from the bill and the selected identifier, and 

transmitting the transaction record to the terminal. 
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27. The method of claim 26, wherein the transaction record includes a digital signature from the 
transaction device. 

28. The method of claim 26, wherein the transaction device is associated with a customer account, and 
5 wherein said multiple identifiers are also known to an agency providing said customer account, the method 

further comprising: 

transmitting the transaction record from the terminal to an agency computer, 
accessing an account record for the customer account based on the selected identifier included in 
the transaction record, 
10 validating the transaction, and 

updating the account record in respect of the validated transaction. 

29. The method of claim 28, wherein prior to transmitting the transaction record from the terminal to 
the agency computer, the terminal incorporates its own copy of the bill into the transaction record. 
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30. A method of operating a computer account system at an agency, said agency maintaining a 
plurality of customer accounts on the computer account system, wherein each customer account has a set of 
multiple identifiers associated therewith, the method comprising: 

receiving a request for a transaction on a customer account, 
20 accessing an identifier within the request, 

determining which set of multiple identifiers the accessed identifier belongs to, and from this 
determining a customer account for the transaction, and 

updating the determined customer account in respect of the transaction. 

25 31. The method of claim 30, wherein determining which set of multiple identifiers the accessed 

identifier belongs to comprises accessing an index that maps identifiers to corresponding account records. 

32. The method of claim 30, wherein the request includes a digital signature generated by a 
transaction device associated with a customer account, and the method further comprises validating the 

30 digital signature. 

33. The method of claim 30, further comprising opening a new customer account by: 
creating a new account record for the new customer account, and 

storing a set of multiple identifiers associated with the new customer account into the new account 

35 record. 



34. The method of claim 33, further comprising: 
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generating the set of multiple identifiers associated with the new customer account, and 
transmitting the generated set of multiple identifiers to a customer transaction device for use with 
the new customer account. 

5 35. The method of claim 33, further comprising generating at least one cryptographic key for use in 
communications between the computer account system and the customer transaction device. 

36. A computer account system at an agency, said system comprising: 

a plurality of customer account records, wherein each customer account record incorporates a set 
10 of multiple identifiers associated therewith, and 

an index that maps identifiers to corresponding account records, 

wherein the system is responsive to receiving a request for a transaction on a customer account to 
access an identifier within the request in order to determine which set of multiple identifiers and hence 
which customer account the accessed identifier belongs to. 
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37. The system of claim 36, wherein the multiple identifiers associated with a customer account 
record are unique to that account record. 

38. The system of claim 36, wherein each account record also includes a cryptographic key for use in 
20 validating a digital signature for transaction records associated with that account. 

39. A computer account system at an agency, said system comprising: 

Means for storing a plurality of customer account records, wherein each customer account record 
incorporates a set of multiple identifiers associated therewith, 
25 Means for mapping identifiers to corresponding account records, 

Means for accessing an identifier within a received transaction request to determine which set of 
multiple identifiers and hence which customer account the accessed identifier belongs to, and 

Means for updating the customer account to which the accessed identifier belongs in accordance 
with the received transaction request. 
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